Thoughtful reviews, automatically
Ship code with a second set of eyes.
Connect a GitHub repository once. Every pull request gets a concise AI review for bugs, security risks, and maintainability issues—right where your team works.
Secure OAuth PR-native comments Review history
AI Review Bot
commented just now
High · src/api/users.ts:42
The query interpolates userId directly, allowing crafted input to alter the SQL statement. Use a parameterized query.
- db.query(`SELECT * FROM users WHERE id = $${userId}`)
+ db.query("SELECT * FROM users WHERE id = $1", [userId])
+ db.query("SELECT * FROM users WHERE id = $1", [userId])
Medium · src/cache.ts:18
The error path leaves the lock held. Release it in a finally block to prevent stalled requests.
One simple loop
From opened PR to useful feedback.
01
GitHub signals
A signed webhook fires when a pull request is opened or updated.
02
Gemini reviews
The changed code is securely fetched, chunked, and checked for actionable issues.
03
Feedback lands
A concise Markdown review is posted to the PR and saved to your dashboard.